Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“When you enter the temporary code, it just loads forever.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1b428a2a947053ce9321ef96aa97877f79ca0b451a40aab3e5769288ef537408
Signature (Ed25519, base64)
4nzFEsszIhaGCdfITWx+nc2a5Yw9GyzHAwjGRy0rYu4nR1GwucyPcd110hG36Ng3rLvInR1E8Iw4GVr+r/y7Dg==
Merkle root
fbbe54686ff192def9dac89bdc2006ad47a493d00db3b3a9ff43e3b123308061
Merkle path
["1b45859e9f2fad189535a875f4f062072ea8c92d03614a53dc0412a42ad0d269","48c3c66043919285ceb46d83516ba9b1c57439fc0b3348937bdf6d286e0dec5d","775b403ab7f80312a2a02ccd6ce392cad92f8c3de7b41b816bb66813b5c97e9a","c289eb61c3297c86206ad2723d08db37454228739d32039d0411aac14f51d499","6118622af113c9777ae945b63cb90734a3320314e61dc8744b17e3fe949ea114","4b3732864ac9f23c7648c677a008e676760531043e3174fe96e5cc799b4efe38","65da9c5f3755a4389d097c06218901496bfc97b67ba4d76127afb96d8b1f3b36","4471a748704fbb39745ddf0e2b1b8f58a10a467ba98076bda1827d4f820b6d66","312a2ff3ed22185566dfccc188370e8c237c68680124b43e65775ee80de88049","a7a9f519304288ec1ece414fdbeff2878f4291fa4d88b3b2fe280f5d421e014b","712623c9a1f93bf754c65a04c937eed9172bb43af36612a218a3039cf9242da0","394052a1783c06195d1f74aee6afd26aa97f2751e6f004c1ac568a60882de8cc","625eca1bb9e6a91dfa6035d766ca1bb6ab8a6b58b95ce694996f607f2e15cc42","924cd389915044788bccd2a79bfcfb29ab0fa44adbc43b1e7877ad3c03c87c9f","910ae6498c24b3e218a7772cda41516322afe32b5ccc8489f6bd972bc23cc14e"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647504463 · entry 108e9186e8c5677ab12e…
Expected log hash
3bc4a58498687620ad93cc1fb735b54a6af64886697db4c643becfe466e70236 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788063157670","kind":"published-quote","locale":"en","page":"theme:sunrise/delivery/en","quote":"When you enter the temporary code, it just loads forever.","rating":2,"review_date":"2025-02-03","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fbbe54686ff1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.